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Top Stories 

• Three individuals pleaded guilty in New York to taking part in a $45 million international 
cybercrime group that used stolen card payment information to make fraudulent ATM 
withdrawals in several countries. - Softpedia (See item 6 ) 

• Microsoft released its November Patch Tuesday round of patches, closing a total of 19 
vulnerabilities in Windows and Office products, including three marked as critical. - The 
Register (See item 32) 

• Jackson Plaza in Sylva, North Carolina, was evacuated for 6 hours after officials closed the 
plaza when a teenager committed suicide in his car in the parking lot using poison gas. - 
Sylva Herald (See item 

• Eleven people were injured in a four-alarm fire at the Kew Gardens residential building in 
New York City that caused hundreds of residents to evacuate and severely damaged 4 
apartments. - WCBS 2 New York City; Associated Press (See item 44 ) 
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Energy Sector 



1 . November 12, Associated Press - (Wyoming) Wyo. now requires water tests before 
drilling. The Wyoming Oil and Gas Conservation Commission adopted a new rule 
November 12 that requires testing for pollution in nearby water wells and other water 
sources before companies can begin drilling for oil and gas in the State in order to help 
determine the condition of groundwater near oil and gas wells. 

Source: http://www.greenwichtime.com/news/science/articleAVvo-now-requires-water- 
tests-before-drilling-4978683.php 

For another story, see item 8 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

2. November 12, New London Day - (Connecticut) Millstone 2 shutdown Saturday. The 
Unit 2 reactor at the Millstone Power Station in Waterford shut down automatically 
November 9 after it experienced a loss of condenser vacuum while flushing the turbine 
condenser system. A failed electrical relay was found to be responsible and the reactor 
was restarted November 1 1 after the relay was replaced. 

Source: http://www.thedav.com/article/2Q131 1 12/NWS01/131 1 19935/- 1/NWS 

3. November 12, Rutland Herald - (Vermont) Missing flood seals found at Vermont 
Yankee nuclear plant for third time in 18 months. An inspection by the U.S. 

Nuclear Regulatory Commission found missing flood seals at the Vermont Yankee 
nuclear power plant in Brattleboro, which could compromise the plant’s electrical 
systems. The issue was previously identified; however, a contractor hired by the plant’s 
operator failed to replace the missing seals. 

Source: http://www.gazettenet.com/news/stateregion/9302943-95/missing-flood-seals- 
found-at-vermont- yankee-nuclear-plan-for-third-time-in- 1 8 
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Critical Manufacturing Sector 

4. November 12, WIFR 23 Rockville - (Illinois) Chemical reaction at Chrysler plant 
sends 1 to hospital. One person was taken to a hospital and the day shift was evacuated 
from a Chrysler plant in Belvidere November 12 after two chemicals were mistakenly 
mixed, producing a strong odor. 
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Source: http://www.wifr.com/home/headlines/Chrysler-Plant-Evacuated- After- 
Chemical-Incident— 23 1 62669 1 .html 
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Defense Industrial Base Sector 

5. November 12, Washington Post - (California) Senior Navy civilians investigated in 
alleged scheme to defraud military for $1.6 million. Three senior Navy civilian 
officials are being investigated for an alleged contracting scheme that charged the 
military $1.6 million for unmarked and untraceable rifle silencers that actually cost 
$8,000 to manufacture. The suspects are on leave and their access to classified material 
was suspended as the investigation is ongoing. 

Source: http://www.washingtonpost.com/world/national-securitv/senior-navy-civilians- 
investigated-in-alleged-scheme-to-defraud-military-for- 1 6- 
million/2013/1 l/12/74383ffa-4bbb-l le3-9890-ale0997fb0c0 storv.html 
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Financial Services Sector 

6. November 13, Softpedia - (International) 3 members of cybercriminal ring plead 
guilty to taking part in card fraud scheme. A total of three individuals pleaded guilty 
in New York, one November 12 and two others in October, to taking part in a $45 
million international cybercrime group known as “Unlimited Operations” that used 
stolen card payment information to make fraudulent ATM withdrawals in several 
countries. 

Source: http://news.softpedia.com/news/3-Members-of-Cybercriminals-Ring-Plead- 
Guiltv-to-Taking-Part-in-Card-Fraud-Scheme-399686.shtml 

7. November 13, Savannah Morning News - (Georgia) Former bank president pleads 
guilty in fraud scheme. The former president and CEO of First National Bank in 
Savannah pleaded guilty November 12 for his part in a scheme to defraud the now- 
defunct bank of millions of dollars by manipulating loans. The bank’s failure cost the 
Federal Deposit Insurance Corporation more than $90 million. 

Source: http://savannahnow.com/news/2Q 13-11-1 3/former-bank-president-pleads- 
guilty-fraud-scheme 

8. November 13, Associated Press - (Missouri) Mo. businessman pleads guilty to 
federal charges. A Fanexa business owner pleaded guilty November 12 to mail fraud 
and money laundering for defrauding the Missouri Petroleum Storage Tank Insurance 
Fund of more than $1.3 million by creating inflated invoices sent to the fund. 

Source: http://www.mvsanantonio.com/news/crime/article/Mo-businessman-pleads- 
guilty-to-federal-charges-49797 6 1 .php 
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9. November 12, Gothamist - (New York) Police find plenty of crack cocaine, fake 



credit cards, stun guns in Bed-Stuy apartment raid. Three men were arrested in 
New York City November 1 1 after police found 2 credit card skimmers, around 400 
fraudulent credit cards, drugs, and weapons during a raid on an apartment in the Bed- 
Stuy area of the city. 

Source: http://gothamist.com/2013/ll/12/cops find crack cocaine fake credit.php 

10. November 12, U-T San Diego - (California) Toothless man suspected of robbery 
series arrested. A man suspected of being the “Toothless Bandit” responsible for 
seven bank robberies in the San Diego area was arrested November 9. 

Source: http ://w w w . utsandie go . com/new s/20 1 3/no v/ 1 2/toothles s -man- arrested/ 
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Transportation Systems Sector 

11. November 13, WAVY 10 Portsmouth - (North Carolina) Man killed in crash with gas 
tanker. A fatal multi-vehicle accident involving a semi-truck carrying gasoline and car 
at the intersection of U.S. Route 158 and Martin Street in Kill Devil Hills, North 
Carolina, killed one man and shut down traffic on the route for several hours in both 
directions while an investigation was conducted November 12. 

Source: http://www.wavv.com/news/local/man-killed-in-crash-with-gas-tanker 

12. November 12, WAVE 3 Louisville - (Kentucky) Clermont 1-65 rest stop closed due to 
semi leaking chemicals. A chemical leak from a semi-truck carrying 30 drums of 
chemicals closed a rest stop on southbound Interstate 65 in Bullitt County November 
12. HAZMAT crews were on the scene to identify and clean up the spill. 

Source: http://www.wave3.com/storv/23948029/clermont-i-65-rest-stop-closed-due-to- 
semi-leaking-chemicals 

13. November 12, KCAU 9 Sioux City - (Iowa) Railroad debris in Merrill, Iowa causes 
damage to vehicles. Reports of debris coming from railroad tracks on Iowa’s Highway 
75 closed all but one lane while Burlington Northern Santa Fe Railway officials worked 
to temporarily fix the problem November 12. 

Source: http://www.kcautv.com/storv/23948165/railroad-debris-in-merrill-iowa-causes- 
damged-to- vehicles 

14. November 12, Clearfield Gant Daily - (International) Two crews of hijacked U.S. 
ship freed in Nigeria. Two American crew members of a U.S. oilfield supply ship in 
the Gulf of Guinea that was hijacked October 23 were released November 12 after 
ransom was paid to the pirates. 

Source: http://gantdailv.com/2013/ll/12/two-crews-of-hijacked-u-s-ship-freed-in- 
nigeria/ 

15. November 12, Palm Beach Post - (Florida) Mechanical issue closes Flagler Bridge to 
Palm Beach until further notice. The Florida Department of Transportation 
announced the closure of the Flagler Memorial Bridge because of a mechanical issue 
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with the span locks beginning November 12 until further notice. 

Source: http://www.palmbeachpost.com/news/news/local/mechanical-issue-closes- 
flagler-bridge/nbqTf/ 



[ Return to top] 

Food and Agriculture Sector 

16. November 12, KDVR 31 Denver - (Colorado) State Agriculture dept, issues 
quarantine for Boulder plants over Emerald Ash Borer. The Colorado Department 
of Agriculture issued a quarantine in Boulder County, and several other locations in the 
State, that prohibits the movement of all untreated Fraxinus plants and plant parts 
because of an Emerald Ash Borer infestation. 

Source: http://kdvr.com/2013/ll/12/state-agriculture-dept-issues-quarantine-for- 
boulder- wood-over-emerald-ash-borer/ 

17. November 12, U.S. Food and Drug Administration — (California) Whole Foods 
Market recalls ready-to-eat grain salads. Whole Foods Markets’ Northern California 
region recalled ready-to-eat Artichoke Wheatberry Salad and Southwest SooFoo Salad 
products as a preventive measure and in response to a recall issued by Glass Onion 
Catering November 12 because of potential E. coli 0157:H7 contamination. 

Source: http://www.fda.gov/Safetv/Recalls/ucm374618.htm 

18. November 10, Food Safety News - (International) FSIS declares China’s poultry- 
slaughter system not equivalent. The U.S. Department of Agriculture’s Food Safety 
and Inspection Service declared November 10 that poultry slaughtered in China will 
not be allowed to be imported to the U.S. citing that China’s poultry-slaughter system 
not equivalent. 

Source: http://www.foodsafetvnews.com/2013/ll/fsis-declares-chinas-poultry- 
slaughter-system-not-equivalent/ 
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Water and Wastewater Systems Sector 

19. November 13, Meriden Record- Journal - (Connecticut) State cites Wallingford over 
lack of stormwater management. The Massachusetts Department of Energy and 
Environmental Protection issued a notice of violation to the town of Wallingford 
November 7 for failing to properly prepare a stormwater management plan, failure to 
monitor stormwater discharges, failure to submit stormwater monitoring results 
between 2008 and 2010, and for not preparing and submitting a required report in 2010. 
Source: http://www.mvrecordjournal.com/wallingford/wallingfordnews/2873750- 
129/state-cites-wallingford-over-lack-of-stormwater-management.html 

20. November 13, Denver Post - (Colorado) 4,000 to 9,000 gallons of contaminated 
water spills from Cotter site. A ruptured underground pipe at the former Cotter Corp. 
uranium mill near Canon City spilled between 4,000 and 9,000 gallons of water 
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contaminated with uranium and molybdenum November 5. The water was confined to 
an on-site collection system, according to a Colorado Department of Public Health and 
Environment spokesman. 

Source: http://www.denverpost.com/breakingnews/ci 245096 17/5-000-gallons- 
contaminated-water-spills-from-defunct 

21. November 12, Amarillo Globe-News - (Texas) 150K gallons of wastewater spills. 
Multiple pump failures at Lift Station 40 in Amarillo November 12 led to about 

150.000 gallons of wastewater spilling into an open pasture next to the lift station. 
Source: http://amarillo.com/news/latest-news/2Q13-l 1-12/city- 150k-gallons- 
wastewater-spills-northwest-amarillo 

22. November 11, Baltimore Sun - (Maryland) Sewage spills into Gunpowder Falls. 

800.000 gallons of raw sewage spilled into Gunpowder Falls November 10 after a 
Baltimore Gas and Electric Co. worker accidentally cut power to a sewage pumping 
station in Baltimore, overflowing into a river for about 2 hours. 

Source: http://articles.baltimoresun.com/2013-ll-ll/features/bs-gr-sewage-overflow- 
20131111 1 gunpowder-falls-raw-sewage-utility-work 
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Healthcare and Public Health Sector 

23. November 12, WPRI 12 Providence - (Rhode Island) Providence police: Man stole 
1,200 OxyContin pills from Walgreens. Police are searching for a man that robbed a 
Walgreens pharmacy in Providence and stole 12 bottles of prescription medicine 
containing 1,200 OxyContin pills November 9. 

Source: http://www.wpri.eom/news/local/mcgowan/providence-police-man-stole-1200- 
oxycontin-pills-from-walgreens 
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Government Facilities Sector 

24. November 13, New Castle News - (Pennsylvania) Three injured in school hus crash. 
One student and two drivers were injured November 12 after a First Student school bus 
was hit by a car in New Castle likely due to icy road conditions. 

Source: http://www.ncnewsonline.com/update/x2112920899/Three-injured-in-school- 
bus-crash 

25. November 12, Albany Democrat-Herald - (Oregon) Takena Elementary back to 
normal after power outage. Takena Elementary School in Albany, Oregon, was 
forced to close November 12 after an underground fuse blew and cut off power. Service 
was restored several hours later and classes were scheduled to resume November 13. 
Source: http://democratherald.com/news/local/power-outage-closes-takena- 
school/article 449eeb98-4bc7-l Ie3-9221-001a4bcf887a.html 
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26. November 12, NBC News - (New York) Air National Guard drone crashes into 
Lake Ontario, military says. A MQ-9 Reaper, an unarmed Air National Guard 
unmanned aerial vehicle, originating from Wheeler Sack Army Airfield at Fort Drum, 
New York, crashed into Lake Ontario during a training exercise November 5. A search 
for the aircraft was called off November 9 because of bad weather in the area, and the 
U.S. Air Force is investigating the crash. 

Source: http ://investigations .nbcnews .com/ news/20 13/11/1 2/2 142673 8 -air-national- 
guard-drone-crashes-into-lake-ontario-military-savs 

27. November 11, Louisville Courier-Journal - (K^niwc^iy) Jeffersonville reports 
‘serious’ breach of personal data. Authorities notified 311 city vendors and officials 
in Jeffersonville, Kentucky, of a recurring personal data breach after their names, 
addresses, and some Social Security numbers were accidentally emailed to city 
employees. Officials believe the email breach began in 2001 as the city finance 
department began sending out its monthly list of vendor payments. 

Source: http://www.courier- 

iournal.com/article/2013 1 1 1 1/NEWS02/3 111 10083/Jeffersonville-data-securitv-breach 
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Emergency Services Sector 

28. November 13, Medford Mail Tribune - (Oregon) Robber who leaped into tree 
captured. Authorities captured a Jackson County Jail inmate November 12 in Oregon 
City without incident after he escaped from the jail in 2012. 

Source: 

http://www. mailtribune.com/apps/pbcs. dll/article?AID=/2013 1 1 13/NEWS/3 1 1 130317 

29. November 12, New York Daily News - (New York) 4 city workers injured as 
sanitation truck hits ambulance in Brooklyn. Four people were injured after an 
ambulance and a New York City Sanitation truck collided November 12 in Brooklyn. 
Source: http://www.nvdailvnews.com/new-vork/brooklvn/4-city-workers-hurt- 
sanitation-truck-hits-ambulance-brooklyn-article- 1 .151455 1 

30. November 12, SC Magazine - (New York) NYPD detective pleads guilty to hiring 
email hackers. A New York Police Department detective pleaded guilty November 9 
to computer hacking charges after he obtained credentials for roughly 43 personal 
email accounts and one mobile phone belonging to nearly 30 individuals between April 
2010 and October 2012. The investigating uncovered that the detective paid over 
$4,000 for hacking services. 

Source: http://www.scmagazine.com/nvpd-detective-pleads-guiltv-to-hiring-email- 
hackers/article/3206 1 4/ 

31. November 12, Stockton Record - (California) Calif, medevac provider fined for 
violating plan. San Joaquin County officials issued a fine against REACH Air Medical 
Services of nearly $33,000 for violating the county’s trauma plan in two incidents in 
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August. The air- ambulance company also submitted a corrective plan of action that 
includes new training and more communication. 

Source: http://www.firehouse.com/news/11230618/calif-medevac-provider-fined-for- 
violating-plan 

For another story, see item 44 
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Information Technology Sector 

32. November 13, The - (International) IE 0-day plugged up by TIFF terror 

continues in November Patch Tuesday. Microsoft released its November Patch 
Tuesday round of patches, closing a total of 19 vulnerabilities in Windows and Office 
products, including three marked as critical. A TIFF image handling vulnerability 
remained unaddressed but a workaround is available. 

Source: http://www.theregister.co.uk/2013/ll/13/november patch tuesday/ 

33. November 13, Softpedia - (International) Second version of Hlux/Kelihos botnet 
getting smaller, Kaspersky says. Researchers at Kaspersky reported progress in their 
attempts to disrupt the second version of the Hlux/Kelihos botnet, and found that most 
of the remaining bots in the botnet are running Windows XP, among other findings. 
Source: http://news.softpedia.com/news/Second-Version-of-Hlux-Kelihos-Botnet- 
Getting-Smaller-Kasperskv-Says-399824.shtml 

34. November 13, The Register - (International) Facebook makes Adobe fans change 
their horrible, horrible passwords. Facebook scanned millions of email addresses and 
passwords released as part of a major breach of Adobe customer emails and passwords, 
identified Facebook users with the same passwords, and alerted users to the need to 
change their passwords to prevent account hijacking. 

Source: 

http://www.theregister.co.uk/2013/ll/12/facebook forces adobe users to change thei 
r horrible passwords/ 

35. November 13, Softpedia - (International) Adobe Flash Player II.9.900.I52 addresses 
critical vulnerabilities. Adobe released a new update for Flash Player, closing two 
critical memory corruption vulnerabilities. Users were advised to install the updates as 
soon as possible. 

Source: http://news.softpedia.eom/news/Adobe-Flash-Plaver-ll-9-900-152-Addresses- 
Critic al- V ulnerabilitie s- 3 99642 . shtml 

36. November 12, Sophos - (International) Smartphone PINs skimmed with microphone 
and camera. Researchers at the University of Cambridge created a program called PIN 
Skimmer which can utilize a smartphone’s camera and microphone to guess a high 
proportion of PINs, demonstrating how a malicious program could harvest device PINs 
and passwords. 

Source: http://nakedsecuritv.sophos.com/20I3/Il/I2/smartphone-pins-cracked-with- 
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microphone-and-camera-a-game-changer-for-phone-security/ 



37. November 12, Softpedia - (International) Google Chrome 31.0.1650.48 Stable fixes 
25 vulnerabilities. Google released a new major version of its Chrome browser, fixing 
a total of 25 issues. 

Souree: http://news.softpedia.eom/news/Google-Chrome-31-0-1650-48-Stable-Fixes- 
25-Vulnerabilities-399565.shtml 

38. November 12, Softpedia - (International) Vulnerabilities in RunKeeper allowed 
cybercriminals to run XSS worm. A security researcher found and reported a cross- 
site scripting (XSS) and a cross-site reference forgery (CSRF) vulnerability in the 
RunKeeper app that could have allowed cybercriminals to develop a worm capable of 
stealing user cookies, collecting private data, or distributing malware. RunKeeper fixed 
the vulnerabilities after being notified. 

Source: http://news.softpedia.com/news/Vulnerabilities-in-RunKeeper-Allowed- 
Cvbercriminals-to-Run-XSS-Worm-399517.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Weh site: http://www.it-isac.org 
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Communications Sector 

39. November 12, Stars and Stripes - (International) Signal issues continue to plague 
AFN Radio in Bahrain. The American Forces Network radio station that serves an 
audience of 7,200 U.S. personnel in Bahrain experienced transmitter problems 
including static and occasional dead air in the past couple of weeks. Upgrades to the 
radio studio equipment, as well as approved increases to the signal from 250 watts to 
400 watts, are in the works. 

Source: http://www.stripes.com/news/signal-issues-continue-to-plague-afn-radio-in- 
bahrain- 1.252433 
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Commercial Facilities Sector 

40. November 13, Wisconsin State Journal- (Wisconsin) Willy Street buildings 

evacuated for gas leak. A natural gas line that was damaged when a worker sawed 
through a pipe closed several blocks of Williamson Street in Madison, Wisconsin, and 
caused the evacuation of four nearby buildings for about 2 hours November 12. 
Source: http://host.madison.com/wsi/news/local/crime and courts/willy-street- 
buildings-evacuated-for-gas-leak/article 0c21b573-a2a4-5e73-bbld- 
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41. November 13, Sylva Herald - (North Carolina) Shopping center is evacuated after 
teen’s poison gas suicide, Jackson Plaza in Sylva, North Carolina, was evacuated for 6 
hours November 10 after officials closed the plaza when a teenager committed suicide 
in his car in the parking lot using poison gas. 

Source: http://www.thesvlvaherald.com/top stories/article 87cc543e-4bcf-lle3-a864- 
0019bb30f31a.html 

42. November 13, WGAL 8 Lancaster - (Pennsylvania) Fire at Visaggio’s in Cumberland 
County ruled accidental. Officials reported a fire at the Visaggio restaurant in 
Cumberland County was ruled accidental and may have started in an exhaust fan in the 
ceiling above the women’s restroom. The restaurant owner stated that it may take 3 to 6 
months before they reopen. 

Source: http://www.vdr.com/state/ci 24508653/fire-at-visaggios-cumberland-county- 
ruled- accidental 

43. November 13, WITl 6 Milwaukee - (Wisconsin) Apartment building evacuated due 
to gas leak. A Milwaukee apartment building was evacuated for several hours 
November 13 after an issue with a boiler caused a gas leak. 

Source: http://fox6now.com/2013/ll/13/apartment-building-near-13th-locust- 
evacuated-due-to-gas-leak/ 

44. November 12, WCBS 2 New York City; Associated Press - (New York) 11 injured in 
Kew Gardens fire. Eleven people, including 8 firefighters, were injured November 12 
in a four- alarm fire at the Kew Gardens residential building in New York City that 
caused hundreds of residents to evacuate and severely damaged 4 apartments. 

Source: http://newvork.cbslocal.eom/2013/ll/12/l l-injured-in-kew-gardens-fire/ 

45. November 12, Appleton Post Crescent - (Wisconsin) Bomb threats hit Waupun. 
Waupun police are investigating a string of eight phoned bomb threats to city 
businesses in a span of 40 hours that began November 10. The threats were found to 
not to be credible after evacuations and searches. 

Source: http://www.postcrescent.com/article/2Q131 1 12/APC0101/31 1 120442/Bomb- 
threats-hit-Waupun 
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Dams Sector 



Nothing to report 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
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To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 
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